30 lines
766 B
Nix
30 lines
766 B
Nix
{ config, lib, ... }:
|
|
with lib;
|
|
let cfg = config.void.server.services.mumble;
|
|
in {
|
|
options.void.server.services.mumble = { enable = mkEnableOption false; };
|
|
|
|
config = mkIf cfg.enable {
|
|
services = {
|
|
murmur = {
|
|
enable = true;
|
|
port = 64738;
|
|
openFirewall = true;
|
|
welcomeText = "sako.lol!";
|
|
sslKey = "/var/lib/acme/mumble.sako.lol/key.pem";
|
|
sslCert = "/var/lib/acme/mumbe.sako.lol/fullchain.pem";
|
|
bandwidth = 72000;
|
|
clientCertRequired = true;
|
|
};
|
|
};
|
|
|
|
security.acme.certs."mumble.sako.lol" = {
|
|
group = config.services.murmur.group;
|
|
defaults.credentialsFile = "/srv/secrets/porkbun";
|
|
defaults.dnsProvider = "porkbun";
|
|
defaults.webroot = null;
|
|
};
|
|
|
|
};
|
|
}
|